diff --git a/services/nextcloud.nix b/services/nextcloud.nix
index 3026f25..94d8595 100644
--- a/services/nextcloud.nix
+++ b/services/nextcloud.nix
@@ -112,10 +112,10 @@ in
             extraConfig = ''
               absolute_redirect off;
               location = /.well-known/carddav {
-                return 301 /remote.php/dav;
+                return 301 /remote.php/dav/;
               }
               location = /.well-known/caldav {
-                return 301 /remote.php/dav;
+                return 301 /remote.php/dav/;
               }
               location ~ ^/\.well-known/(?!acme-challenge|pki-validation) {
                 return 301 /index.php$request_uri;
@@ -166,7 +166,7 @@ in
             try_files $uri /index.php$request_uri;
             access_log off;
           '';
-          "~ \.woff2?$".extraConfig = ''
+          "~ \.(otf|woff2?)$".extraConfig = ''
             try_files $uri /index.php$request_uri;
             expires 7d;         # Cache-Control policy borrowed from `.htaccess`
             access_log off;     # Optional: Don't log access to assets
diff --git a/services/nexus.nix b/services/nexus.nix
index e0dcf04..66ba852 100644
--- a/services/nexus.nix
+++ b/services/nexus.nix
@@ -5,11 +5,11 @@ let
   lPort = 9081;
   nexusPkgs = pkgs.nexus.overrideAttrs (oldAttrs: rec {
     pname = "nexus";
-    version = "3.66.0-02";
+    version = "3.69.0-02";
     sourceRoot = "${pname}-${version}";
     src = pkgs.fetchurl {
       url = "https://sonatype-download.global.ssl.fastly.net/nexus/3/nexus-${version}-unix.tar.gz";
-      sha256 = "sha256-m/rTgM5ptCU32Rrt1vPJpiUWvUWPbAiOqlFgHfx+8x4=";
+      sha256 = "sha256-7sgLPuM93mFEPlTd3qJY+FGVHErvgcTGJWwSBcqBgWI=";
     };
     installPhase = ''
       runHook preInstall