diff --git a/dnsconfig.js b/dnsconfig.js
index 994ad64..e4c7ae7 100644
--- a/dnsconfig.js
+++ b/dnsconfig.js
@@ -99,11 +99,13 @@ cnames("arirex.me", rexbox, [
   "Chhoto URL@l",
   "ConvertX@convert",
   "Enclosed@bin",
+  // "HomeBox@homebox", // Needed to setup SSO
   "IT Tools@it",
   "Karakeep@karakeep",
   "Matrix > Element@chat",
   "Matrix > Synapse@matrix",
   "Ntfy@ntfy",
+  // "Paperless@paperless", // Needed to setup SSO
 ]);
 
 cnames("achl.fr", rexbox, [
@@ -118,13 +120,16 @@ minecraft("The Furry Cult", "thefurrycult.mc", "arirex.me", 54924);
   RexCloud Services
 \* -------------------------------------------------------------------------- */
 cnames("arirex.me", rexcloud, [
+  "AirTrail@airtrail",
   "Beszel@beszel",
   "Gitea@git",
   "IPFS Path Gateway@gw",
   "IPFS Subdomain Gateway@*.ipfs.gw",
   "IPFS Subdomain Gateway@*.ipns.gw",
+  // "MediaMTX@s", // Archived over Owncast
   "Opengist@gist",
   "OpenWebUI@ai",
+  "Owncast@stream",
   "Pocket ID@id",
   "SearXNG@search",
 ]);
diff --git a/flake.lock b/flake.lock
index 5ca1333..9448fe0 100644
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1776548001,
-        "narHash": "sha256-ZSK0NL4a1BwVbbTBoSnWgbJy9HeZFXLYQizjb2DPF24=",
+        "lastModified": 1778443072,
+        "narHash": "sha256-zi7/fsqM/kFdNuED//4WOCUtezGtKKqRNORjMvfwjnA=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "b12141ef619e0a9c1c84dc8c684040326f27cdcc",
+        "rev": "da5ad661ba4e5ef59ba743f0d112cbc30e474f32",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index 87a58b6..31d8833 100644
--- a/flake.nix
+++ b/flake.nix
@@ -11,8 +11,22 @@
       in {
         devShells.default = pkgs.mkShell {
           buildInputs = with pkgs; [
-            dnscontrol
-            git-crypt
+            (dnscontrol.overrideAttrs (oldAttrs: {
+              version = "4.38.0";
+              src = fetchFromGitHub {
+                owner = "DNSControl";
+                repo = "dnscontrol";
+                rev = "v${oldAttrs.version}";
+                sha256 = "sha256-lM+9xuNB88csciIC5eu2oRl0IBqZE7CCPCxf8BEZSz0=";
+              };
+              vendorHash = "sha256-pzdOW+L/w74ANaCKXWQviBMDlSTOfebAVE7Cdd+lZLo=";
+            }))
+            (git-crypt.overrideAttrs (oldAttrs: { src = fetchFromGitHub {
+              owner = "narrowin";
+              repo = "git-crypt";
+              rev = "v0.8.0-narrowin";
+              sha256 = "sha256-sVlX+T67Vbsfr/o7u1y+nI07iRcjHx5HmsBBEULwgTg=";
+            };}))
           ];
         };
       }