diff --git a/flake.lock b/flake.lock
index 7319088..41ef6c2 100644
--- a/flake.lock
+++ b/flake.lock
@@ -252,11 +252,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1726905744,
-        "narHash": "sha256-xyNtG5C+xvfsnOVEamFe9zCCnuNwk93K/TlFC/4DmCI=",
+        "lastModified": 1727040444,
+        "narHash": "sha256-19FNN5QT9Z11ZUMfftRplyNN+2PgcHKb3oq8KMW/hDA=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "b493dfd4a8cf9552932179e56ff3b5819a9b8381",
+        "rev": "d0cb432a9d28218df11cbd77d984a2a46caeb5ac",
         "type": "github"
       },
       "original": {
@@ -300,11 +300,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1726755586,
-        "narHash": "sha256-PmUr/2GQGvFTIJ6/Tvsins7Q43KTMvMFhvG6oaYK+Wk=",
+        "lastModified": 1726937504,
+        "narHash": "sha256-bvGoiQBvponpZh8ClUcmJ6QnsNKw0EMrCQJARK3bI1c=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "c04d5652cfa9742b1d519688f65d1bbccea9eb7e",
+        "rev": "9357f4f23713673f310988025d9dc261c20e70c6",
         "type": "github"
       },
       "original": {
@@ -316,11 +316,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1726838390,
-        "narHash": "sha256-NmcVhGElxDbmEWzgXsyAjlRhUus/nEqPC5So7BOJLUM=",
+        "lastModified": 1726969270,
+        "narHash": "sha256-8fnFlXBgM/uSvBlLWjZ0Z0sOdRBesyNdH0+esxqizGc=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "944b2aea7f0a2d7c79f72468106bc5510cbf5101",
+        "rev": "23cbb250f3bf4f516a2d0bf03c51a30900848075",
         "type": "github"
       },
       "original": {
diff --git a/hosts/Shura/default.nix b/hosts/Shura/default.nix
index 7625c8a..a4e380d 100644
--- a/hosts/Shura/default.nix
+++ b/hosts/Shura/default.nix
@@ -72,7 +72,7 @@ in
         user = config.users.users.aires.name;
       };
       netdata = {
-        # FIXME: getting an error "remote node response is not understood, is it Netdata?". Disabling for now
+        # Disabled until I get Nginx configured to provide a streaming endpoint
         enable = false;
         type = "child";
         url = config.secrets.services.netdata.url;
diff --git a/hosts/Shura/hardware-configuration.nix b/hosts/Shura/hardware-configuration.nix
index 460c260..4fc8480 100644
--- a/hosts/Shura/hardware-configuration.nix
+++ b/hosts/Shura/hardware-configuration.nix
@@ -51,4 +51,7 @@ in
       AttrKeyboardIntegration=internal
     '';
   };
+
+  # Limit the number of cores Nix can use
+  nix.settings.cores = 12;
 }
diff --git a/modules/secrets/default.nix b/modules/secrets/default.nix
index 8e8c01b..59b16cf 100644
Binary files a/modules/secrets/default.nix and b/modules/secrets/default.nix differ
diff --git a/modules/services/netdata.nix b/modules/services/netdata.nix
index f35ab60..03e88a3 100644
--- a/modules/services/netdata.nix
+++ b/modules/services/netdata.nix
@@ -109,6 +109,7 @@ in
           };
         };
         # Set up streaming
+        # FIXME: Requires a non-HTTP port. See https://community.netdata.cloud/t/properly-running-parent-child-nodes/1417/4
         configDir = {
           "stream.conf" = pkgs.writeText "stream.conf" ''
             [stream]
diff --git a/packages/freight-pro.nix b/packages/freight-pro.nix
index fe4dd67..f62af38 100644
--- a/packages/freight-pro.nix
+++ b/packages/freight-pro.nix
@@ -18,7 +18,7 @@ stdenv.mkDerivation rec {
   installPhase = ''
     runHook preInstall
 
-    install -Dm644 ${pname}-${version}/*.otf -t $out/share/fonts/opentype
+    install -m 644 -D Freight-${version}/*.otf -t $out/share/fonts/opentype
 
     runHook postInstall
   '';