diff --git a/configuration/services/nextcloud.nix b/configuration/services/nextcloud.nix
index 75993c3..81f38a3 100644
--- a/configuration/services/nextcloud.nix
+++ b/configuration/services/nextcloud.nix
@@ -11,6 +11,7 @@ in {
     inherit hostName;
 
     package = nextcloud;
+    enableBrokenCiphersForSSE = false;
     enable = true;
     maxUploadSize = "2G";
     https = true;
@@ -29,9 +30,11 @@ in {
       defaultPhoneRegion = "AT";
     };
 
-    phpOptions = {
-      "opcache.interned_strings_buffer" = "16";
-    };
+    phpOptions =
+      options.services.nextcloud.phpOptions.default
+      // {
+        "opcache.interned_strings_buffer" = "16";
+      };
 
     extraApps = {
       inherit (pkgs.local) bookmarks calendar contacts cookbook news notes;
diff --git a/configuration/services/postgres.nix b/configuration/services/postgres.nix
index 018dc6e..923007d 100644
--- a/configuration/services/postgres.nix
+++ b/configuration/services/postgres.nix
@@ -18,11 +18,15 @@
     ensureUsers = [
       {
         name = "grafana";
-        ensureDBOwnership = true;
+        ensurePermissions = {
+          "DATABASE grafana" = "ALL PRIVILEGES";
+        };
       }
       {
         name = "nextcloud";
-        ensureDBOwnership = true;
+        ensurePermissions = {
+          "DATABASE nextcloud" = "ALL PRIVILEGES";
+        };
       }
     ];
 
diff --git a/pkgs/mkNextcloudApp.nix b/pkgs/mkNextcloudApp.nix
index 9bf6b26..6430ac1 100644
--- a/pkgs/mkNextcloudApp.nix
+++ b/pkgs/mkNextcloudApp.nix
@@ -5,5 +5,4 @@
 fetchNextcloudApp {
   url = source.src.url;
   sha256 = source.src.sha256;
-  license = "unlicense"; # Blatant lie
 }