diff --git a/flake.lock b/flake.lock
index 5c9b4b6..28cb149 100644
--- a/flake.lock
+++ b/flake.lock
@@ -236,16 +236,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1717476296,
-        "narHash": "sha256-ScHe38Tr+TxGURC17kby4mIIxOG3aJvZWXzPM79UnEk=",
+        "lastModified": 1718530513,
+        "narHash": "sha256-BmO8d0r+BVlwWtMLQEYnwmngqdXIuyFzMwvmTcLMee8=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "095ef64aa3b2ab4a4f1bf07f29997e21e3a5576a",
+        "rev": "a1fddf0967c33754271761d91a3d921772b30d0e",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-23.11",
+        "ref": "release-24.05",
         "repo": "home-manager",
         "type": "github"
       }
@@ -299,11 +299,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1718662658,
-        "narHash": "sha256-AKG7BsqtVWDlefgzyKz7vjaKTLi4+bmTSBhowbQoZtM=",
+        "lastModified": 1719128254,
+        "narHash": "sha256-I7jMpq0CAOZA/i70+HDQO/ulLttyQu/K70cSESiMX7A=",
         "owner": "lnl7",
         "repo": "nix-darwin",
-        "rev": "29b3096a6e283d7e6779187244cb2a3942239fdf",
+        "rev": "50581970f37f06a4719001735828519925ef8310",
         "type": "github"
       },
       "original": {
@@ -330,16 +330,16 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1718811006,
-        "narHash": "sha256-0Y8IrGhRmBmT7HHXlxxepg2t8j1X90++qRN3lukGaIk=",
+        "lastModified": 1718835956,
+        "narHash": "sha256-wM9v2yIxClRYsGHut5vHICZTK7xdrUGfrLkXvSuv6s4=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "03d771e513ce90147b65fe922d87d3a0356fc125",
+        "rev": "dd457de7e08c6d06789b1f5b88fc9327f4d96309",
         "type": "github"
       },
       "original": {
         "owner": "nixos",
-        "ref": "nixos-23.11",
+        "ref": "nixos-24.05",
         "repo": "nixpkgs",
         "type": "github"
       }
@@ -533,11 +533,11 @@
     },
     "unstable": {
       "locked": {
-        "lastModified": 1718895438,
-        "narHash": "sha256-k3JqJrkdoYwE3fHE6xGDY676AYmyh4U2Zw+0Bwe5DLU=",
+        "lastModified": 1719075281,
+        "narHash": "sha256-CyyxvOwFf12I91PBWz43iGT1kjsf5oi6ax7CrvaMyAo=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "d603719ec6e294f034936c0d0dc06f689d91b6c3",
+        "rev": "a71e967ef3694799d0c418c98332f7ff4cc5f6af",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index e361d3f..ccff813 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,7 +1,7 @@
 {
   inputs = {
     # Track channels with commits tested and built by hydra
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-23.11";
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-24.05";
     unstable.url = "github:nixos/nixpkgs/nixos-unstable";
 
     nixpkgs-2205.url = "github:nixos/nixpkgs/nixos-22.05";
@@ -9,7 +9,7 @@
     nix-darwin.url = "github:lnl7/nix-darwin/master";
     nix-darwin.inputs.nixpkgs.follows = "nixpkgs";
 
-    home-manager.url = "github:nix-community/home-manager/release-23.11";
+    home-manager.url = "github:nix-community/home-manager/release-24.05";
     home-manager.inputs.nixpkgs.follows = "nixpkgs";
 
     flake-parts.url = "github:hercules-ci/flake-parts";
diff --git a/modules/forgejo/default.nix b/modules/forgejo/default.nix
index 26f7979..dee6d12 100644
--- a/modules/forgejo/default.nix
+++ b/modules/forgejo/default.nix
@@ -163,7 +163,7 @@
   # gitea gitconfig
   programs.gnupg.agent = {
     enable = true;
-    pinentryFlavor = "curses";
+    pinentryPackage = pkgs.pinentry-curses;
   };
   # Required to make gpg work without a graphical environment?
   # otherwise generating a new gpg key fails with this error:
diff --git a/modules/keycloak/default.nix b/modules/keycloak/default.nix
index 98c9312..3c9316e 100644
--- a/modules/keycloak/default.nix
+++ b/modules/keycloak/default.nix
@@ -52,7 +52,6 @@
         http-host = "127.0.0.1";
         http-port = 8080;
         proxy = "edge";
-        features = "declarative-user-profile";
       };
       themes = {
         "pub.solar" =
diff --git a/modules/loki/default.nix b/modules/loki/default.nix
index 0c3ea19..3fedf75 100644
--- a/modules/loki/default.nix
+++ b/modules/loki/default.nix
@@ -64,8 +64,8 @@
         split_queries_by_interval = "0";
       };
       compactor = {
-        shared_store = "filesystem";
         compaction_interval = "10m";
+        delete_request_store = "filesystem";
         retention_enabled = true;
         retention_delete_delay = "2h";
         retention_delete_worker_count = 150;
@@ -82,6 +82,16 @@
               period = "24h";
             };
           }
+          {
+            from = "2024-05-31";
+            store = "tsdb";
+            object_store = "filesystem";
+            schema = "v13";
+            index = {
+              prefix = "index_";
+              period = "24h";
+            };
+          }
         ];
       };
     };
diff --git a/modules/matrix/default.nix b/modules/matrix/default.nix
index f8b2355..66b071f 100644
--- a/modules/matrix/default.nix
+++ b/modules/matrix/default.nix
@@ -270,18 +270,18 @@ in
     ];
 
     plugins = [ config.services.matrix-synapse.package.plugins.matrix-synapse-shared-secret-auth ];
+  };
 
-    sliding-sync = {
-      enable = true;
-      settings = {
-        SYNCV3_SERVER = "https://${publicDomain}";
-        SYNCV3_BINDADDR = "127.0.0.1:8011";
-        # The bind addr for Prometheus metrics, which will be accessible at
-        # /metrics at this address
-        SYNCV3_PROM = "127.0.0.1:9100";
-      };
-      environmentFile = config.age.secrets."matrix-synapse-sliding-sync-secret".path;
+  services.matrix-sliding-sync = {
+    enable = true;
+    settings = {
+      SYNCV3_SERVER = "https://${publicDomain}";
+      SYNCV3_BINDADDR = "127.0.0.1:8011";
+      # The bind addr for Prometheus metrics, which will be accessible at
+      # /metrics at this address
+      SYNCV3_PROM = "127.0.0.1:9100";
     };
+    environmentFile = config.age.secrets."matrix-synapse-sliding-sync-secret".path;
   };
 
   services.restic.backups.matrix-synapse-storagebox = {
diff --git a/modules/nextcloud/default.nix b/modules/nextcloud/default.nix
index 8bf2c1d..0f81781 100644
--- a/modules/nextcloud/default.nix
+++ b/modules/nextcloud/default.nix
@@ -31,7 +31,6 @@
     https = true;
     secretFile = config.age.secrets."nextcloud-secrets".path; # secret
     maxUploadSize = "1G";
-    skeletonDirectory = "./nextcloud-skeleton";
 
     configureRedis = true;
 
@@ -47,11 +46,11 @@
       dbtype = "pgsql";
       dbname = "nextcloud";
       dbtableprefix = "oc_";
-      overwriteProtocol = "https";
     };
 
-    extraOptions = {
+    settings = {
       overwrite.cli.url = "http://cloud.${config.pub-solar-os.networking.domain}";
+      overwriteprotocol = "https";
 
       installed = true;
       default_phone_region = "+49";
@@ -92,7 +91,7 @@
 
       auth.bruteforce.protection.enabled = true;
       trashbin_retention_obligation = "auto,7";
-      skeletondirectory = "";
+      skeletondirectory = "./nextcloud-skeleton";
       defaultapp = "file";
       activity_expire_days = "14";
       integrity.check.disabled = false;
diff --git a/overlays/default.nix b/overlays/default.nix
index 85fd3b3..af9faa9 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -12,9 +12,6 @@
                 unstable = import inputs.unstable { system = prev.system; };
               in
               {
-                forgejo-runner = unstable.forgejo-runner;
-                forgejo = unstable.forgejo;
-                prometheus-node-exporter = unstable.prometheus-node-exporter;
                 element-themes = prev.callPackage ./pkgs/element-themes { inherit (inputs) element-themes; };
                 element-stickerpicker = prev.callPackage ./pkgs/element-stickerpicker {
                   inherit (inputs) element-stickers maunium-stickerpicker;