diff --git a/home/gram.nix b/home/gram.nix
index 42a47b5..1c76bfa 100644
--- a/home/gram.nix
+++ b/home/gram.nix
@@ -21,6 +21,10 @@
       pkgs.tinymist
       pkgs.tofu-ls
       pkgs.ltex-ls-plus
+      pkgs.vtsls
+      pkgs.vscode-langservers-extracted
+      pkgs.vscode-json-languageserver
+      pkgs.package-version-server
     ];
     userSettings = {
       theme = {
diff --git a/hosts/srv03/default.nix b/hosts/srv03/default.nix
index d2cacb1..fef7d76 100644
--- a/hosts/srv03/default.nix
+++ b/hosts/srv03/default.nix
@@ -63,6 +63,9 @@
       proxy = {
         domain = "netbird.jfreudenberger.de";
         token-secret = config.age.secrets.netbird-proxy;
+        extraPorts = [
+          "222:222/tcp" # Forgejo SSH routing
+        ];
       };
     };
     netbird.server = let
diff --git a/modules/traefik.nix b/modules/traefik.nix
index 971d14b..98a997e 100644
--- a/modules/traefik.nix
+++ b/modules/traefik.nix
@@ -93,7 +93,7 @@ in {
         ];
       };
       docker-socket-proxy = {
-        image = "tecnativa/docker-socket-proxy:v0.4.2";
+        image = "tecnativa/docker-socket-proxy:v0.4.2@sha256:1f3a6f303320723d199d2316a3e82b2e2685d86c275d5e3deeaf182573b47476";
         autoStart = true;
         networks = [
           "docker-socket"
diff --git a/renovate.json b/renovate.json
index efb4b22..c426941 100644
--- a/renovate.json
+++ b/renovate.json
@@ -8,7 +8,7 @@
       "groupName": "netbird"
     },
     {
-      "matchSourceUrls": "git+ssh://git@git.jfreudenberger.de/JuliusFreudenberger/nix-private.git",
+      "matchPackageNames": "ssh://git@git.jfreudenberger.de/JuliusFreudenberger/nix-private.git",
       "enabled": false
     }
   ],