diff --git a/.forgejo/workflows/cachix.yaml b/.forgejo/workflows/cachix.yaml
index 2bb8bdf..c669bbc 100644
--- a/.forgejo/workflows/cachix.yaml
+++ b/.forgejo/workflows/cachix.yaml
@@ -17,16 +17,16 @@ jobs:
     container:
       image: ghcr.io/catthehacker/ubuntu:act-22.04
     steps:
-    - name: Checkout sources
-      uses: actions/checkout@v4
+    - uses: actions/checkout@v4
 
-    - name: Install Nix
-      uses: https://github.com/cachix/install-nix-action@V27
+    - uses: https://github.com/DeterminateSystems/nix-installer-action@main
       with:
-        nix_path: nixpkgs=channel:nixos-unstable
-        github_access_token: ${{ secrets.GH_PUBLIC_REPO_ACCESS_TOKEN }}
+        extra-conf: |
+          access-tokens = ${{ secrets.GH_PUBLIC_REPO_ACCESS_TOKEN }}
 
-    - name: Authenticate with Cachix
+    - uses: DeterminateSystems/magic-nix-cache-action@main
+
+    - name: Setup Cachix
       uses: https://github.com/cachix/cachix-action@v15
       with:
         name: adtya
@@ -34,7 +34,7 @@ jobs:
 
     - name: Build and push flake output
       run: |
-        nix build -L .#caddy --access-tokens "github.com=${{ secrets.GH_PUBLIC_REPO_ACCESS_TOKEN }}"
+        nix build -L .#caddy
 
   publish-aarch64:
     name: Push to Binary Cache (aarch64)
@@ -42,16 +42,16 @@ jobs:
     container:
       image: ghcr.io/catthehacker/ubuntu:act-22.04
     steps:
-    - name: Checkout sources
-      uses: actions/checkout@v4
+    - uses: actions/checkout@v4
 
-    - name: Install Nix
-      uses: https://github.com/cachix/install-nix-action@V27
+    - uses: https://github.com/DeterminateSystems/nix-installer-action@main
       with:
-        nix_path: nixpkgs=channel:nixos-unstable
-        github_access_token: ${{ secrets.GH_PUBLIC_REPO_ACCESS_TOKEN }}
+        extra-conf: |
+          access-tokens = ${{ secrets.GH_PUBLIC_REPO_ACCESS_TOKEN }}
 
-    - name: Authenticate with Cachix
+    - uses: DeterminateSystems/magic-nix-cache-action@main
+
+    - name: Setup Cachix
       uses: https://github.com/cachix/cachix-action@v15
       with:
         name: adtya
@@ -59,5 +59,5 @@ jobs:
 
     - name: Build and push flake output
       run: |
-        nix build -L .#caddy --access-tokens "github.com=${{ secrets.GH_PUBLIC_REPO_ACCESS_TOKEN }}"
+        nix build -L .#caddy