diff --git a/config/derek.nix b/config/derek.nix
index 19b0389..7968fa0 100644
--- a/config/derek.nix
+++ b/config/derek.nix
@@ -41,12 +41,13 @@ in
   };
   services = {
     tailscale.enable = true;
+    open-webui.enable = lib.mkForce false;
+    ollama.enable = lib.mkForce false;
     sunshine = {
       enable = true;
       autoStart = true;
       capSysAdmin = true;
       openFirewall = true;
-
     };
   };
   users.users.bearded_dragonn = {
diff --git a/hosts/workstation/configuration.nix b/hosts/workstation/configuration.nix
index f246d15..65a6c06 100644
--- a/hosts/workstation/configuration.nix
+++ b/hosts/workstation/configuration.nix
@@ -134,7 +134,6 @@ in
     ../../secrets/ssh/root-private-ca.pem
   ];
   services = {
-    minio.enable = true;
     flatpak.enable = true;
     open-webui.enable = true;
     scx = {
@@ -155,27 +154,4 @@ in
       models = "/srv/ai/ollama";
     };
   };
-  systemd.services.minio-init = {
-    description = "Initialize MinIO buckets";
-    after = [ "minio.service" ];
-    wantedBy = [ "multi-user.target" ];
-    serviceConfig = {
-      Type = "oneshot";
-      RemainAfterExit = true;
-    };
-    script = ''
-      # Wait for MinIO to be ready
-      until ${pkgs.curl}/bin/curl -sf http://localhost:9000/minio/health/live > /dev/null 2>&1; do
-        echo "Waiting for MinIO..."
-        sleep 1
-      done
-
-      # Configure mc alias and create bucket
-      ${pkgs.minio-client}/bin/mc alias set local http://localhost:9000 minioadmin minioadmin || true
-      ${pkgs.minio-client}/bin/mc mb local/webref || true
-      ${pkgs.minio-client}/bin/mc anonymous set public local/webref || true
-
-      echo "MinIO initialized with webref bucket"
-    '';
-  };
 }
diff --git a/modules/servers/stash.nix b/modules/servers/stash.nix
index c728686..1186b70 100644
--- a/modules/servers/stash.nix
+++ b/modules/servers/stash.nix
@@ -59,7 +59,7 @@ in
         LD_LIBRARY_PATH = "${pkgs.stdenv.cc.cc.lib}/lib:${pkgs.glibc}/lib:${pkgs.zlib}/lib:${pkgs.libffi}/lib:${pkgs.openssl}/lib";
       };
       serviceConfig = {
-        PrivateUsers = false;
+        PrivateUsers = lib.mkForce false;
         BindReadOnlyPaths = lib.mkForce [ ];
         BindPaths = lib.mkIf (cfgS.settings != { }) (map (stash: "${stash.path}") cfgS.settings.stash);
       };