diff --git a/flake.lock b/flake.lock
index 121373e055cb336e4158eeb60754cb409a12d215..925bc56939d91283f964d1c581b0c9e83f095f6f 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2,16 +2,16 @@ {
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1748856973,
-        "narHash": "sha256-RlTsJUvvr8ErjPBsiwrGbbHYW8XbB/oek0Gi78XdWKg=",
+        "lastModified": 1729665710,
+        "narHash": "sha256-AlcmCXJZPIlO5dmFzV3V2XF6x/OpNWUV8Y/FMPGd8Z4=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "e4b09e47ace7d87de083786b404bf232eb6c89d8",
+        "rev": "2768c7d042a37de65bb1b5b3268fc987e534c49d",
         "type": "github"
       },
       "original": {
         "owner": "nixos",
-        "ref": "nixpkgs-unstable",
+        "ref": "nixos-unstable",
         "repo": "nixpkgs",
         "type": "github"
       }
diff --git a/flake.nix b/flake.nix
index 9b6cfb6fee46bdd12c2f7bbbf4cf0c00e58f862a..f3316b95b0f218c1cda08b72c8857abec9b40bdb 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,6 +1,6 @@
 {
   description = "Tailscale proxy";
-  inputs.nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
+  inputs.nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
   outputs =
     {
       nixpkgs,
diff --git a/nix/pkg.nix b/nix/pkg.nix
index b3bcc914e3ac723257721ba09ff05ff6f8eda370..74596593553121d0b11c52ddb96b73d310d40b4e 100644
--- a/nix/pkg.nix
+++ b/nix/pkg.nix
@@ -4,7 +4,7 @@ }:
 let
   name = "tailproxy";
 in
-pkgs.buildGoModule {
+pkgs.buildGo123Module {
   pname = name;
   version = "main";
   src = pkgs.nix-gitignore.gitignoreSource [ ] (
@@ -14,7 +14,7 @@       path = ../.;
     }
   );
   vendorHash = pkgs.lib.fileContents ../go.mod.sri;
-  env.CGO_ENABLED = 0;
+  CGO_ENABLED = 0;
   flags = [ "-trimpath" ];
   ldflags = [
     "-s"