diff --git a/configs/desktop-packages-full.nix b/configs/desktop-packages-full.nix
index 148b495..da0f054 100644
--- a/configs/desktop-packages-full.nix
+++ b/configs/desktop-packages-full.nix
@@ -37,7 +37,7 @@
     veracrypt
     via
     vlc
-    xorg.libX11
+    libx11
 
     # jetbrains
     # jetbrains-toolbox
diff --git a/configs/desktop-packages-light.nix b/configs/desktop-packages-light.nix
index 1aa272f..54f83dd 100644
--- a/configs/desktop-packages-light.nix
+++ b/configs/desktop-packages-light.nix
@@ -1,7 +1,7 @@
 # Core desktop packages for lightweight desktop systems.
 
 { pkgs, inputs, ... }:
-let system = pkgs.system; in
+let system = pkgs.stdenv.hostPlatform.system; in
 
 {
   environment.systemPackages = with pkgs; [
@@ -75,10 +75,10 @@ let system = pkgs.system; in
     vim
     wirelesstools
     xclip
-    xfce.thunar
-    xfce.thunar-volman
-    xfce.tumbler
-    xfce.xfce4-power-manager
+    thunar
+    thunar-volman
+    tumbler
+    xfce4-power-manager
     xss-lock
     yubikey-agent
     yubikey-manager
diff --git a/configuration.nix b/configuration.nix
index 6a4997b..4ecfe22 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -42,7 +42,7 @@
   # networking.hostName = "imladris"; # Define your hostname.
   networking.networkmanager.enable = true;
   services.resolved.enable = true;
-  services.resolved.fallbackDns = [
+  services.resolved.settings.Resolve.FallbackDNS = [
     "1.1.1.1"
     "8.8.8.8"
   ];
diff --git a/hw/orion/default.nix b/hw/orion/default.nix
index 2a38e89..5b104cd 100644
--- a/hw/orion/default.nix
+++ b/hw/orion/default.nix
@@ -19,6 +19,6 @@
 
     # DNS: MCNS for internal zones, public resolvers as fallback.
     networking.nameservers = [ "192.168.88.181" "100.95.252.120" "1.1.1.1" "8.8.8.8" ];
-    services.resolved.domains = [ "~mcp.metacircular.net" ];
+    services.resolved.settings.Resolve.Domains = [ "~mcp.metacircular.net" ];
   };
 }
diff --git a/hw/rift/default.nix b/hw/rift/default.nix
index 8a5f6e0..f4fef7e 100644
--- a/hw/rift/default.nix
+++ b/hw/rift/default.nix
@@ -24,6 +24,6 @@
 
     # DNS: MCNS for internal zones, public resolvers as fallback.
     networking.nameservers = [ "192.168.88.181" "1.1.1.1" "8.8.8.8" ];
-    services.resolved.domains = [ "~mcp.metacircular.net" ];
+    services.resolved.settings.Resolve.Domains = [ "~mcp.metacircular.net" ];
   };
 }
diff --git a/hw/straylight/default.nix b/hw/straylight/default.nix
index 8572914..3f483ec 100644
--- a/hw/straylight/default.nix
+++ b/hw/straylight/default.nix
@@ -1,6 +1,6 @@
 { inputs, pkgs, lib, ... }:
 let
-  pkgsUnstable = inputs.nixpkgs-unstable.legacyPackages.${pkgs.system};
+  pkgsUnstable = inputs.nixpkgs-unstable.legacyPackages.${pkgs.stdenv.hostPlatform.system};
   # Pin to b9828; nixpkgs-unstable lags too far behind for the features we need.
   # To update: nix-prefetch-url --unpack https://github.com/ggml-org/llama.cpp/archive/refs/tags/bNNNN.tar.gz
   # then: nix run nixpkgs#prefetch-npm-deps -- <unpacked>/tools/ui/package-lock.json
@@ -141,7 +141,7 @@ in
       "1.1.1.1"
       "8.8.8.8"
     ];
-    services.resolved.domains = [
+    services.resolved.settings.Resolve.Domains = [
       "~mcp.metacircular.net"
     ];
   };
diff --git a/hw/vade/default.nix b/hw/vade/default.nix
index cfd245a..5f293fa 100644
--- a/hw/vade/default.nix
+++ b/hw/vade/default.nix
@@ -55,7 +55,7 @@
     "1.1.1.1"           # Cloudflare (fallback)
     "8.8.8.8"           # Google (fallback)
   ];
-  services.resolved.domains = [
+  services.resolved.settings.Resolve.Domains = [
     "~mcp.metacircular.net"
   ];