diff --git a/modules/sys/security.nix b/modules/sys/security.nix
index 1d9093b..466714c 100644
--- a/modules/sys/security.nix
+++ b/modules/sys/security.nix
@@ -6,9 +6,11 @@
   };
   system.autoUpgrade = {
     enable = true;
-    flake = "git+https://k3t.dev/git/nixconf.git?ref=main";
-    operation = "boot";
+    flake = "git+https://git.k3t.dev/k3t/nixconf.git";
+    operation = "switch";
+    runGarbageCollection = true;
+    randomizedDelaySec = "2hr";
     allowReboot = true;
-    rebootWindow = { lower = "10:00"; upper = "14:00"; };
+    rebootWindow = { lower = "04:00"; upper = "08:00"; };
   };
-}
\ No newline at end of file
+}