diff --git a/modules/services/jellyfin.nix b/modules/services/jellyfin.nix
index 510bb51..1571f12 100644
--- a/modules/services/jellyfin.nix
+++ b/modules/services/jellyfin.nix
@@ -351,21 +351,21 @@ in
         shblib.replaceSecretsScript {
           file = ldapConfig;
           resultPath = "/var/lib/jellyfin/plugins/configurations/LDAP-Auth.xml";
-          userConfig = {
+          replacements = {
             "%LDAP_PASSWORD%" = "$(cat ${cfg.ldapPasswordFile})";
           };
         }
         + shblib.replaceSecretsScript {
           file = ssoConfig;
           resultPath = "/var/lib/jellyfin/plugins/configurations/SSO-Auth.xml";
-          userConfig = {
+          replacements = {
             "%SSO_SECRET%" = "$(cat ${cfg.ssoSecretFile})";
           };
         }
         + shblib.replaceSecretsScript {
           file = brandingConfig;
           resultPath = "/var/lib/jellyfin/config/branding.xml";
-          userConfig = {
+          replacements = {
             "%a%" = "%a%";
           };
         };
diff --git a/modules/services/nextcloud-server.nix b/modules/services/nextcloud-server.nix
index 3c2943e..b0199b3 100644
--- a/modules/services/nextcloud-server.nix
+++ b/modules/services/nextcloud-server.nix
@@ -863,7 +863,7 @@ in
           id = cfg.apps.sso.clientID;
           description = "Nextcloud";
           secret.source = cfg.apps.sso.secretFileForAuthelia;
-          public = "false";
+          public = false;
           authorization_policy = cfg.apps.sso.authorization_policy;
           redirect_uris = [ "${protocol}://${fqdnWithPort}/apps/oidc_login/oidc" ];
           scopes = [