diff --git a/hosts/tsuki/services/gitea/default.nix b/hosts/tsuki/services/gitea/default.nix
index fb8dd2c..9f393fe 100644
--- a/hosts/tsuki/services/gitea/default.nix
+++ b/hosts/tsuki/services/gitea/default.nix
@@ -16,17 +16,17 @@
   services.gitea = {
     enable = true;
     user = "git";
-    cookieSecure = true;
     rootUrl = "https://git.nani.wtf/";
     domain = "git.nani.wtf";
     httpPort = secrets.ports.gitea;
-    disableRegistration = true;
 
     package = unstable-pkgs.gitea;
 
+    stateDir = "${config.machineVars.dataDrives.default}/var/gitea";
+
     dump = {
       enable = true;
-      interval = "hourly";
+      interval = "weekly";
     };
 
     database = {
@@ -42,6 +42,9 @@
         LANDING_PAGE = "/explore/repos";
       };
 
+      service.DISABLE_REGISTRATION = true;
+      session.COOKIE_SECURE = true;
+
       ui = {
         DEFAULT_THEME = "monokai";
         THEMES = lib.strings.concatStringsSep "," [
@@ -89,10 +92,6 @@
     };
   };
 
-  # TODO: remove when updating to nixpkgs 22.11
-  systemd.services.gitea.serviceConfig.SystemCallFilter = 
-    lib.mkForce "~@clock @cpu-emulation @debug @keyring @memlock @module @mount @obsolete @raw-io @reboot @setuid @swap";
-
   system.activationScripts.linkGiteaThemes.text = let
     themes = pkgs.stdenv.mkDerivation {
       pname = "gitea-themes";