diff --git a/flake.lock b/flake.lock
index 06719c3a4c155a51b162930bc1a5e30b239f1ff7..2232471e1040ef478d46b2a28e011f383050354d 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,11 +2,11 @@ {
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1720594544,
-        "narHash": "sha256-w6dlBUQYvS65f0Z33TvkcAj7ITr4NFqhF5ywss5T5bU=",
+        "lastModified": 1742800061,
+        "narHash": "sha256-oDJGK1UMArK52vcW9S5S2apeec4rbfNELgc50LqiPNs=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "aa9461550594533c29866d42f861b6ff079a7fb6",
+        "rev": "1750f3c1c89488e2ffdd47cab9d05454dddfb734",
         "type": "github"
       },
       "original": {

diff --git a/module/default.nix b/module/default.nix
index f183a9d217ccd6b665721906ecdc5ebe46ccd90e..74ea55af08853c6006d31a31e6a8ba9584074cce 100644
--- a/module/default.nix
+++ b/module/default.nix
@@ -20,6 +20,7 @@       data_dir = cfg.dataDir;
       ssh_port = cfg.sshPort;
       web_port = cfg.webPort;
       time_format = cfg.timeFormat;
+      create_repo = cfg.createRepo;
       repo = builtins.map (repo: {
         inherit (repo) id desc;
         clone_addr = repo.cloneAddr;
@@ -53,6 +54,15 @@     admins = lib.mkOption {
       type = lib.types.listOf lib.types.str;
       default = [ ];
       description = "List of admin SSH public keys";
+    };
+
+    createRepo = lib.mkOption {
+      type = lib.types.enum [
+        "admin"
+        "user"
+      ];
+      default = "admin";
+      description = "Who can create new repos";
     };
 
     sshPort = lib.mkOption {

diff --git a/pkg/default.nix b/pkg/default.nix
index fa569c263549ce663a78f0c26979378c7275c7c5..8d3b0bea0483abee159e1f134f1c2a2bc6cc7369 100644
--- a/pkg/default.nix
+++ b/pkg/default.nix
@@ -3,23 +3,23 @@   pkgs ? import <nixpkgs>,
 }:
 pkgs.buildGoModule rec {
   pname = "git-pr";
-  version = "d15bf3ca0f2b9222c59bc2c180f681e0c2b6cd39";
+  version = "0.0.2";
 
   src = pkgs.fetchFromGitHub {
     owner = "picosh";
     repo = pname;
-    rev = "${version}";
-    sha256 = "sha256-rypTKppAwu6XwyTBcV96I+2qflSNFrO8ILjZE9ha6kM=";
+    rev = "v${version}";
+    sha256 = "sha256-7Ka8p5X8nQBXKiT6QsWOWMQJL8rePKrHz/LZU1W+oQ8=";
   };
 
-  vendorHash = "sha256-yoEITVoM6Dbf7QRVxxjsGKTmllDlMwRsqGevbM6AJ+w=";
+  vendorHash = "sha256-tu5C7hz6UTgn/jCCotXzZHlUmGVNERhA7Osxi31Domk=";
 
   subPackages = [
     "cmd/ssh"
     "cmd/web"
   ];
 
-  CGO_ENABLED = 0;
+  env.CGO_ENABLED = 0;
 
   meta = with pkgs.lib; {
     description = "The easiest git collaboration tool";