diff --git a/hosts/vps-public/default.nix b/hosts/vps-public/default.nix
index 125a3c0..52841f9 100644
--- a/hosts/vps-public/default.nix
+++ b/hosts/vps-public/default.nix
@@ -6,7 +6,7 @@
     inputs.disko.nixosModules.default
   ];
 
-  system.stateVersion = "25.05";
+  system.stateVersion = "25.11";
 
   meta = {
     domains.validate = true;
@@ -18,10 +18,10 @@
 
     sops = {
       enable = true;
-      agePublicKey = "age1tfgn62qe9264yzsw5svdppz57e3dhlzfcf043ecpg82mgny88gwsdxg9vz";
+      agePublicKey = "age1j47wr83tg4t8sdjcyarwvvrt8qzjrgw2fa2e4nufffdev89t8prsu7lxnh";
     };
 
-    boot.loader.grub.enable = true;
+    boot.loader.systemd-boot.enable = true;
 
     services =
       let
diff --git a/hosts/vps-public/disko.nix b/hosts/vps-public/disko.nix
index ead84f6..800ecba 100644
--- a/hosts/vps-public/disko.nix
+++ b/hosts/vps-public/disko.nix
@@ -24,7 +24,11 @@
             size = "20G";
             content = {
               type = "filesystem";
-              format = "ext4";
+              format = "xfs";
+              extraArgs = [
+                "-m"
+                "reflink=1"
+              ];
               mountpoint = "/nix";
               mountOptions = [ "noatime" ];
             };
diff --git a/hosts/vps-public/hardware.nix b/hosts/vps-public/hardware.nix
index 49ad185..5a8d950 100644
--- a/hosts/vps-public/hardware.nix
+++ b/hosts/vps-public/hardware.nix
@@ -23,8 +23,8 @@
       linkConfig.RequiredForOnline = "routable";
       networkConfig.DHCP = "no";
       address = [
-        "91.107.212.241/32"
-        "2a01:4f8:1c17:5597::1/64"
+        "167.235.73.246/32"
+        "2a01:4f8:c0c:3baf::1/64"
       ];
       routes = [
         {
diff --git a/hosts/vps-public/secrets.json b/hosts/vps-public/secrets.json
index 65de0da..cecde9b 100644
--- a/hosts/vps-public/secrets.json
+++ b/hosts/vps-public/secrets.json
@@ -1,7 +1,7 @@
 {
   "seb-password": "ENC[AES256_GCM,data:znyHz9AhZipp2VNkXifU27IvEbPoKqLf4ibSkqfvkGGoX/jHnoJRYruWmwLnAaqTk6moHtew6HZq3xjvNgUf+qVgaleWQntrLg==,iv:GpBQNm1jspU8PCN+SzfAUKSps3YySg6JJVYOLOFetOI=,tag:CKgqMm/mVae1i9He/ioMAg==,type:str]",
   "tailscale": {
-    "auth-key": "ENC[AES256_GCM,data:7Kqq0c1+726OHqFtEUkM/2udHe+UUxYtJ8UEl5RHo0ZLE5uxxPyh16Fmq30/E58ZU3CRSrWOCm28CbsSMQ==,iv:1UmMkobgm/GWM/5NjIYTDnNva13mcxqkX01uyPISNRo=,tag:nc5Uzc6W9lyZIbCF9u8n5g==,type:str]",
+    "auth-key": "ENC[AES256_GCM,data:tnmR93k4iPsojBZgwVmnSPJkNDOYiJt9lJ/IpoDR/TWCIbpBmbFq7xKSnyoCXBRKiEZ6hK0z3jezuQc9IgQ=,iv:/b3+yxEOuPaRrrmD3LSUeSiNv/1u4bMxrg4B+1SKb0o=,tag:9f6ZSgFjP4HAExWiaStr2g==,type:str]",
     "service-auth-key": "ENC[AES256_GCM,data:fW9M95GXFGUrhIXiuVQdD+l7O+7qcTcYGVuTZC1hSUQunL/fjNh+cLFvjwEpKVvsZJ7uDzD0IHQlicBmzPI=,iv:XDFwA47jyQ8jkIOfkooywXGzUAtbQb5ktjbrcHnep9g=,tag:kh6G1ey8Ly2Rzx1DdoDmRQ==,type:str]"
   },
   "forgejo": {
@@ -31,15 +31,15 @@
     "age": [
       {
         "recipient": "age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5",
-        "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVcUhTQ1BiYVNRVURPUWZF\nSGxlNUpDRjhCY1hvL3ZQRG13b3FkTkNFT0N3Clk0UFlqNDJJWWJjb2tSMzltUVBm\nbE1Pc1UxS28yZmpZTllISllscDd2WjgKLS0tIGdkMmYvd0xvU3padHRmb1RHb3Rp\nS1dYUE53V3RvWmJmb3pWVXEveXkyQjgKQSsXj8K/3uG28doasG3BgOSIBcPUjkGH\nNPTeR/mHWnuq+yoLRP+3UuspfugIDTId+GpQ7ufXNrk4giw1LCSSxg==\n-----END AGE ENCRYPTED FILE-----\n"
+        "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCZncwTE1GMjQvWHlGRFh0\nSVU2emoxOEZ5VlJTMmtmS0ZNMDZja3NFWWcwCmpRbjZMV2NqQ3pTemVuMzZvTUZo\nT3YzQWdhUWN2UVFRazQrM1M4eUhwNmcKLS0tIFdlRWVnV2wwN2hlUXArLytBcFVr\nWm5JRUVwamdaeEROUjByUkdOcjEwdDgKtLCsbkX9lqirlzdGl7S4T7RZt5PwSzB+\nCylXI9UTTKWybPUhC+Vq1QHnFvw3N+NymDNNjwkNaY8d3YjOX/I9kA==\n-----END AGE ENCRYPTED FILE-----\n"
       },
       {
-        "recipient": "age1tfgn62qe9264yzsw5svdppz57e3dhlzfcf043ecpg82mgny88gwsdxg9vz",
-        "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0WStWWENrZ25qemRGQi9Q\nRmkyeFZVNkYzdzNXZFhTdzlDOHpnVDRtam5zCkxyYk5UeDl3UFFSZzgzWjd3WEZw\nMzRUeHVEcjAvbDNuWGREc2xpeGtvOW8KLS0tIFp0ZjhyNEU1WkV2b2RObG0vaE5m\na1lPVExRK0JLdTByNmNFU1kzZXRvVXMKs7GE8kGKDG5EOjzXMz008yvrkB4x/2dv\ng1BaaYDZ5FzG34e/nRiNOUTOK4GUhHoW6f58gs4Lv75IYIMYYhDNrQ==\n-----END AGE ENCRYPTED FILE-----\n"
+        "recipient": "age1j47wr83tg4t8sdjcyarwvvrt8qzjrgw2fa2e4nufffdev89t8prsu7lxnh",
+        "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvVnphWlNaTUU0QytIdnEv\nQnNzelN4MUMreXZrME5KZStFMDg2V1VFd21rCkk2Uy9ITEF3SjlRVEdMMXlPdHhG\nam1PNnp3emtnMnczeFFSSStJaHF6TkkKLS0tIEJKbFRzbmNqMjk5NXVHZnhlWWZ3\nYng5L1F5YUJGOTg3TTJCK281SG9Id3MKsmH2yj19ig2g+KzBGLD9dWkdvr6TLdSd\nuuDC+frhj7wWrEomOOjIoYtWHXkUtTSAnCEZhrhfyupYhEvlFfWRlw==\n-----END AGE ENCRYPTED FILE-----\n"
       }
     ],
-    "lastmodified": "2025-10-15T18:58:00Z",
-    "mac": "ENC[AES256_GCM,data:0USY8FBhCwdst51xOoj2ENVPEpQ4oDvGTfbZhGsi2O8flJ9t6+8pMT7/SIklqjZy5kp6yQRuPYdDpxGREKGKa0cOA8DTpmtXW4alO+tdIv/yPyin7zXqnrXpMoiLc2WznrGgvMzodmUiqYDdsKVsyaMXaANZsMaegE1Iu6Tp2Jc=,iv:PBmhWnAs86Yh02HvKWvsG1eMyDOj/P6kWZRrXCAC+Fo=,tag:RKWYYmh5B4vcRDjiKr1ZNg==,type:str]",
+    "lastmodified": "2025-11-23T00:06:52Z",
+    "mac": "ENC[AES256_GCM,data:EYfQ1ZX85LjLLbTMeAgCWVKN7jQ28sntlml1vV8zu3ILaQKMHh3FSAWnrN0Xb8YTybGV9c+CP/ZxKH5DuxYo0/pstrLUqY8Bng4bFWDBk2n7eHZcm8suTPIsr0wLxx7tQwHz2KuV9l9JNYqpQQReD677SWjjxZTla6zmkK+uJm4=,iv:JgnCfdxx97Cr7z0Uan/5/49jZtPBoEN7jml+8zqWoBs=,tag:fPLCkAtAvFxVEr6CrnsFNQ==,type:str]",
     "unencrypted_suffix": "_unencrypted",
     "version": "3.11.0"
   }