diff --git a/services/fail2ban.nix b/services/fail2ban.nix
index 6cb1bda..0f368c4 100644
--- a/services/fail2ban.nix
+++ b/services/fail2ban.nix
@@ -19,9 +19,11 @@ in {
   config = mkIf cfg.enable {
     services.fail2ban = {
       enable = true;
-      bantime = "6h";
       bantime-increment.enable = true;
-      jails.DEFAULT.settings.findtime = "6h";
+      jails.DEFAULT = ''
+        bantime = 6h
+        findtime = 6h
+      '';
     };
   };
 }
diff --git a/services/gitea/default.nix b/services/gitea/default.nix
index b8e3e0f..21c9c43 100644
--- a/services/gitea/default.nix
+++ b/services/gitea/default.nix
@@ -85,8 +85,6 @@ in {
         type = "postgres";
         # user needs to be the same as gitea user
         user = giteaUser;
-        # FIXME: change database name to match 23.11 postgres changes around ensureDatabase
-        createDatabase = false;
       };
     };
 
@@ -104,7 +102,7 @@ in {
     # NOTE: no need to use postgresql.ensureDatabases because the gitea module
     # takes care of this automatically
     services.postgresqlBackup = {
-      databases = [config.services.gitea.database.name];
+      databases = ["gitea"];
     };
 
     services.nginx = {
diff --git a/services/nextcloud.nix b/services/nextcloud.nix
index 3f964c2..9d34899 100644
--- a/services/nextcloud.nix
+++ b/services/nextcloud.nix
@@ -62,6 +62,8 @@ in {
     services.nextcloud = {
       enable = true;
 
+      enableBrokenCiphersForSSE = false;
+
       hostName = "cloud.${domain}";
       https = true;
       package = pkgs.nextcloud26;