diff --git a/containers/server-n0/git.nix b/containers/server-n0/git.nix
index b7ac5ce..050812f 100644
--- a/containers/server-n0/git.nix
+++ b/containers/server-n0/git.nix
@@ -176,8 +176,9 @@ in
               PermitEmptyPasswords = "yes";
             };
           };
+          security.pam.services.sshd.allowNullPassword = true;
           users.users.root.initialHashedPassword = "";
-          services.journald.extraConfig = "ForwardToConsole=yes";
+          services.journald.settings.Journal.ForwardToConsole = "yes";
 
           virtualisation.containerd.enable = true;
           virtualisation.containerd.settings.plugins."io.containerd.snapshotter.v1.overlayfs".mount_options =
diff --git a/dsl.nix b/dsl.nix
index 2af94fe..91bf6ed 100644
--- a/dsl.nix
+++ b/dsl.nix
@@ -1269,7 +1269,7 @@ rec {
         # containers don't forward journal to console by default
         containers = lib.genAttrs nspawnNames (_: {
           timeoutStartSec = "10min";
-          config.services.journald.extraConfig = "ForwardToConsole=yes";
+          config.services.journald.settings.Journal.ForwardToConsole = "yes";
         });
 
         # a test VM has neither the memory to hand out nor the cores to divide.