diff --git a/hosts/nb-new.cloonar.com/configuration.nix b/hosts/nb-new.cloonar.com/configuration.nix
index d02a836..863a0f5 100644
--- a/hosts/nb-new.cloonar.com/configuration.nix
+++ b/hosts/nb-new.cloonar.com/configuration.nix
@@ -4,7 +4,9 @@
 
 { config, pkgs, ... }:
 let
-  unstable = import <nixos-unstable> { config = { allowUnfree = true; }; };
+  unstable = import (fetchTarball https://nixos.org/channels/nixos-unstable/nixexprs.tar.xz) {
+    config = { allowUnfree = true; };
+  };
   impermanence = builtins.fetchTarball "https://github.com/nix-community/impermanence/archive/master.tar.gz";
 in {
   nixpkgs.config.allowUnfree = true;
diff --git a/hosts/nb-new.cloonar.com/modules/sway/sway.nix b/hosts/nb-new.cloonar.com/modules/sway/sway.nix
index f0904b3..20fa44a 100644
--- a/hosts/nb-new.cloonar.com/modules/sway/sway.nix
+++ b/hosts/nb-new.cloonar.com/modules/sway/sway.nix
@@ -18,7 +18,9 @@ let
   };
 
   sway-conf = builtins.readFile ./sway.conf + cfg.additionalConfig;
-  unstable = import <nixos-unstable> { config = { allowUnfree = true; }; };
+  unstable = import (fetchTarball https://nixos.org/channels/nixos-unstable/nixexprs.tar.xz) {
+    config = { allowUnfree = true; };
+  };
 in {
   imports = [
     ./social.nix
diff --git a/hosts/nb-new.cloonar.com/users/configs/cryptomator.json b/hosts/nb-new.cloonar.com/users/configs/cryptomator.json
new file mode 100644
index 0000000..236644c
--- /dev/null
+++ b/hosts/nb-new.cloonar.com/users/configs/cryptomator.json
@@ -0,0 +1,35 @@
+{
+  "directories" : [ {
+    "id" : "18g3gg35eC6T",
+    "path" : "/home/dominik/cloud.cloonar.com/Documents",
+    "displayName" : "Documents",
+    "unlockAfterStartup" : false,
+    "revealAfterMount" : true,
+    "usesReadOnlyMode" : false,
+    "mountFlags" : "",
+    "maxCleartextFilenameLength" : 2147483647,
+    "actionAfterUnlock" : "IGNORE",
+    "autoLockWhenIdle" : false,
+    "autoLockIdleSeconds" : 1800,
+    "port" : 42427
+  } ],
+  "writtenByVersion" : "1.12.4-nix-1.12.4",
+  "askedForUpdateCheck" : false,
+  "autoCloseVaults" : true,
+  "checkForUpdatesEnabled" : false,
+  "debugMode" : false,
+  "theme" : "LIGHT",
+  "keychainProvider" : "org.cryptomator.linux.keychain.SecretServiceKeychainAccess",
+  "numTrayNotifications" : 3,
+  "port" : 42427,
+  "showMinimizeButton" : false,
+  "showTrayIcon" : true,
+  "startHidden" : true,
+  "uiOrientation" : "LEFT_TO_RIGHT",
+  "useKeychain" : true,
+  "windowHeight" : 440,
+  "windowWidth" : 650,
+  "windowXPosition" : 426,
+  "windowYPosition" : 280,
+  "lastUpdateCheck" : "2000-01-01"
+}
diff --git a/hosts/nb-new.cloonar.com/users/dominik.nix b/hosts/nb-new.cloonar.com/users/dominik.nix
index 83315a3..35c354f 100644
--- a/hosts/nb-new.cloonar.com/users/dominik.nix
+++ b/hosts/nb-new.cloonar.com/users/dominik.nix
@@ -1,5 +1,8 @@
 { config, lib, pkgs, ... }:
 let
+
+  impermanence = builtins.fetchTarball "https://github.com/nix-community/impermanence/archive/master.tar.gz";
+
   thunderbirdSettings = {
     "extensions.activeThemeID" = "thunderbird-compact-dark@mozilla.org";
     "browser.theme.content-theme" = 0;
@@ -78,10 +81,23 @@ let
 in
 {
   home-manager.users.dominik = { lib, pkgs, ... }: {
+    imports = [ "${impermanence}/home-manager.nix" ];
     /* The home.stateVersion option does not have a default and must be set */
     home.stateVersion = "24.05";
     home.enableNixpkgsReleaseCheck = false;
     /* Here goes the rest of your home-manager config, e.g. home.packages = [ pkgs.foo ]; */
+    home.persistence."/nix/persist/user/dominik" = {
+      removePrefixDirectory = true;   # for GNU Stow styled dotfile folders
+      allowOther = true;
+      directories = [
+        "cloud.cloonar.com"
+        "cloud.epicenter.works"
+        ".config/Nextcloud"
+        ".mozilla"
+        ".thunderbird"
+      ];
+    };
+
     programs.git = {
 
       enable = true;
@@ -305,6 +321,8 @@ EOL
       fi
     '';
 
+    home.file.".config/Cryptomator/settings.json".source = ./configs/cryptomator.json;
+
     /* Setup nextcloud folders */
     home.activation.nextcloud = lib.hm.dag.entryAfter ["writeBoundary"] ''
       set +eu