diff --git a/hosts/stratus/containers/nspawn/default.nix b/hosts/stratus/containers/nspawn/default.nix
index ea66462..dc261db 100644
--- a/hosts/stratus/containers/nspawn/default.nix
+++ b/hosts/stratus/containers/nspawn/default.nix
@@ -47,11 +47,13 @@ in
     hostBridge = "br0";
 
     bindMounts = {
+      # Secrets
       "/run/secrets/container/tailscale-auth-key" = { };
       "/run/secrets/container/${name}".isReadOnly = false;
       "/run/secrets/restic".isReadOnly = false;
       "/run/secrets/healthchecks-ping-key".isReadOnly = false;
 
+      # State
       ${dataDirOf name}.isReadOnly = false;
       "/var/lib/tailscale" = {
         hostPath = "/var/lib/tailscale-${name}";
diff --git a/hosts/stratus/containers/nspawn/nextcloud/default.nix b/hosts/stratus/containers/nspawn/nextcloud/default.nix
index dfa8681..c7352c3 100644
--- a/hosts/stratus/containers/nspawn/nextcloud/default.nix
+++ b/hosts/stratus/containers/nspawn/nextcloud/default.nix
@@ -71,6 +71,7 @@ in
           inherit (config.services.nextcloud.package.packages.apps)
             calendar
             contacts
+            deck
             onlyoffice
             memories
             ;