diff --git a/nixos/hosts/framework-server/docker/internal/it-tools.nix b/nixos/hosts/framework-server/docker/internal/it-tools.nix
index fb71c559..aaeabe86 100644
--- a/nixos/hosts/framework-server/docker/internal/it-tools.nix
+++ b/nixos/hosts/framework-server/docker/internal/it-tools.nix
@@ -1,37 +1,26 @@
 { ... }: {
   virtualisation.oci-containers.containers."it-tools" = {
     image = "docker.io/fredliang/derper";
-    container_name = "it-tools";
+    hostname = "it-tools";
     log-driver = "journald";
-    restart = "always";
-    depends_on = [
+    dependsOn = [
       "promtail"
       "traefik-int"
     ];
     labels = {
-      type = "internal";
-      traefik = {
-        enable = true;
-        docker.network = "sysctlio_default";
-        http = {
-          routers.it-tools = {
-            tls.enable = "true";
-            tls.certresolver = "letsencrypt-int";
-            entrypoints = "web-secure-int";
-            rule = "Host(`sysctl.io`)";
-          };
-          services.it-tools = {
-            loadbalancer.server.port = 80;
-          };
-        };
-      };
+      "type" = "internal";
+      "traefik.enable" = "true";
+      "traefik.http.routers.it-tools.tls" = "true";
+      "traefik.http.routers.it-tools.entrypoints" = "web-secure-int";
+      "traefik.http.routers.it-tools.rule" = "Host(`sysctl.io`)";
+      "traefik.http.services.it-tools.loadbalancer.server.port" = "80";
+      "traefik.http.routers.it-tools.tls.certresolver" = "letsencrypt-int";
+      "traefik.docker.network" = "sysctlio_default";
       # Flame Configs
-      flame = {
-        icon = "home";
-        type = "app";
-        url = "https://sysctl.io";
-        name = "Cyberchef";
-      };
+      "flame.icon" = "home";
+      "flame.type" = "app";
+      "flame.url" = "https://sysctl.io";
+      "flame.name" = "Cyberchef";
     };
   };
 }