diff --git a/nixos/boxes/vpsfree1/cryptpad.nix b/nixos/boxes/vpsfree1/cryptpad.nix
index 9c97285a..7fb688de 100644
--- a/nixos/boxes/vpsfree1/cryptpad.nix
+++ b/nixos/boxes/vpsfree1/cryptpad.nix
@@ -1,18 +1,12 @@
-{
-  config,
-  pkgs,
-  inputs,
-  lib,
-  ...
-}: {
-  imports = [../nginx.nix];
+{ config, pkgs, inputs, lib, ... }: {
+  imports = [ ../nginx.nix ];
 
   services.nginx = {
     virtualHosts = {
       "notes.purrfect.estate" = {
         forceSSL = true;
         enableACME = true;
-        serverAliases = ["notes-sandbox.purrfect.estate"];
+        serverAliases = [ "notes-sandbox.purrfect.estate" ];
         locations."/" = {
           proxyPass = "http://127.0.0.1:9005";
           proxyWebsockets = true;
@@ -21,7 +15,8 @@
     };
   };
   virtualisation.oci-containers.containers.cryptpad = {
-    image = "promasu/cryptpad:nginx";
+    image =
+      "promasu/cryptpad@sha256:29c61f69e41173188c0592e72f2273cf23a83f48e7d143337e2cd7fea441ed87";
     volumes = [
       "${./cryptpad.config.js}:/cryptpad/config/config.js"
 
@@ -39,6 +34,6 @@
       CPAD_TRUSTED_PROXY = "0.0.0.0/0";
       CPAD_HTTP2_DISABLE = "true";
     };
-    ports = ["9005:80"];
+    ports = [ "9005:80" ];
   };
 }