diff --git a/modules/home/sops.nix b/modules/home/sops.nix
index ff3cf3b..bf48cc2 100644
--- a/modules/home/sops.nix
+++ b/modules/home/sops.nix
@@ -26,7 +26,7 @@ in
       default = "${self}/users/${config.home.username}/@${osConfig.networking.hostName}/secrets.json";
     };
     secretsData = lib.mkOption {
-      type = lib.types.anything;
+      type = lib.types.attrs;
       default = cfg.secretsFile |> lib.readFile |> lib.strings.fromJSON;
     };
   };
diff --git a/modules/nixos/networking/default.nix b/modules/nixos/networking/default.nix
index e6bb605..653e790 100644
--- a/modules/nixos/networking/default.nix
+++ b/modules/nixos/networking/default.nix
@@ -16,7 +16,7 @@ in
     };
 
     nodes = lib.mkOption {
-      type = lib.types.anything;
+      type = lib.types.listOf lib.types.attrs;
       default =
         allHosts
         |> lib.attrValues
@@ -31,7 +31,7 @@ in
       readOnly = true;
     };
     peers = lib.mkOption {
-      type = lib.types.anything;
+      type = lib.types.listOf lib.types.attrs;
       default = cfg.nodes |> lib.filter (node: node.hostName != cfg.hostName);
       readOnly = true;
     };
diff --git a/modules/nixos/networking/overlay.nix b/modules/nixos/networking/overlay.nix
index 42b7afa..007e012 100644
--- a/modules/nixos/networking/overlay.nix
+++ b/modules/nixos/networking/overlay.nix
@@ -59,7 +59,7 @@ in
     };
 
     dnsServers = lib.mkOption {
-      type = lib.types.anything;
+      type = lib.types.listOf lib.types.nonEmptyStr;
       default =
         allHosts
         |> lib.attrValues
diff --git a/modules/nixos/services/restic/backups.nix b/modules/nixos/services/restic/backups.nix
index d0ff1c9..51001d3 100644
--- a/modules/nixos/services/restic/backups.nix
+++ b/modules/nixos/services/restic/backups.nix
@@ -31,7 +31,7 @@ in
               default = [ ];
             };
             extraConfig = lib.mkOption {
-              type = lib.types.attrsOf lib.types.anything;
+              type = lib.types.attrs;
               default = { };
             };
           };
diff --git a/modules/nixos/sops.nix b/modules/nixos/sops.nix
index 1dd2c27..8b5fa86 100644
--- a/modules/nixos/sops.nix
+++ b/modules/nixos/sops.nix
@@ -22,7 +22,7 @@ in
       default = "${self}/hosts/${config.networking.hostName}/secrets.json";
     };
     secretsData = lib.mkOption {
-      type = lib.types.anything;
+      type = lib.types.attrs;
       default = cfg.secretsFile |> lib.readFile |> lib.strings.fromJSON;
     };
   };