diff --git a/.github/actions/nix/action.yml b/.github/actions/nix/action.yml
index f42fb6c..aa2fa9d 100644
--- a/.github/actions/nix/action.yml
+++ b/.github/actions/nix/action.yml
@@ -6,6 +6,8 @@ inputs:
     default: |
       accept-flake-config = true
       experimental-features = nix-command flakes pipe-operator
+      extra-substituters = https://nix-cache.dayl.in
+      extra-trusted-public-keys = nix-cache.dayl.in-1:lj22Sov7m1snupBz/43O1fxyEfy/S7cxBpweD7iREcs
       build-dir = /nix/var
       stalled-download-timeout = 0
       download-attempts = 10
@@ -15,8 +17,8 @@ inputs:
   btrfs:
     description: Use BTRFS to setup RAID0
     default: false
-  attic_token:
-    description: token to access attic cache
+  # attic_token:
+  #   description: token to access attic cache
 
 runs:
   using: composite
@@ -32,11 +34,11 @@ runs:
       with:
         extra-conf: ${{ inputs.nix_conf }}
 
-    - name: Install and login to attic cache
-      shell: bash
-      run: |
-        nix profile install "nixpkgs#attic-client"
-        attic login oizys https://attic.dayl.in "${{ inputs.attic_token}}"
+    # - name: Install and login to attic cache
+    #   shell: bash
+    #   run: |
+    #     nix profile install "nixpkgs#attic-client"
+    #     attic login oizys https://attic.dayl.in "${{ inputs.attic_token}}"
 
     - name: "Show Nix Info"
       shell: bash
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 14efc1c..afefa6e 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -42,10 +42,11 @@ jobs:
 
       - uses: daylin-bot/actions/setup@main
       - uses: ./.github/actions/nix
-        with:
-          attic_token: ${{ secrets.ATTIC_TOKEN }}
 
-      # need ssh access for `oizys cache --service harmonica`
+      #   with:
+      #     attic_token: ${{ secrets.ATTIC_TOKEN }}
+      #
+      # need ssh access for `oizys cache --service store`
       # TODO: use this in actions/nix?
       - name: Setup SSH
         uses: MrSquaare/ssh-setup-action@v3
@@ -65,7 +66,6 @@ jobs:
       - name: Pre-build oizys
         run: |
           nix build .
-          attic push oizys result
 
       - name: Build
         run: >