diff --git a/nixos/services/authentik.nix b/nixos/services/authentik.nix
index 24bc72a..c6435cc 100644
--- a/nixos/services/authentik.nix
+++ b/nixos/services/authentik.nix
@@ -10,7 +10,7 @@
   };
   authentik-config = {
     autoStart = true;
-    image = "ghcr.io/goauthentik/server:2024.8.2";
+    image = "ghcr.io/goauthentik/server:2025.2.4";
     volumes = ["/home/tristan/pods/authentik/media:/media"];
     environment = {
       AUTHENTIK_POSTGRESQL__USER = postgres.user;
diff --git a/nixos/services/nextcloud.nix b/nixos/services/nextcloud.nix
index d13cc16..06f4a88 100644
--- a/nixos/services/nextcloud.nix
+++ b/nixos/services/nextcloud.nix
@@ -28,7 +28,7 @@ in {
   services.nextcloud = {
     enable = true;
     https = true;
-    package = pkgs.nextcloud29;
+    package = pkgs.nextcloud30;
     hostName = "files.${config.networking.domain}";
     configureRedis = true;
     database.createLocally = true;
@@ -37,6 +37,7 @@ in {
       dbtype = "pgsql";
     };
     secretFile = sops.templates."nextcloud/secrets.json".path;
+    phpOptions."opcache.interned_strings_buffer" = "23";
     settings = {
       maintenance_window_start = 2;
       default_phone_region = "GB";
@@ -82,12 +83,8 @@ in {
         previewgenerator
         deck
         news
+        oidc_login
         ;
-      oidc_login = pkgs.fetchNextcloudApp {
-        sha256 = "sha256-DrbaKENMz2QJfbDKCMrNGEZYpUEvtcsiqw9WnveaPZA=";
-        url = "https://github.com/pulsejet/nextcloud-oidc-login/releases/download/v3.2.0/oidc_login.tar.gz";
-        license = "agpl3Only";
-      };
     };
     maxUploadSize = "5G";
   };