diff --git a/.github/actions/install-lix/action.yml b/.github/actions/install-lix/action.yml
deleted file mode 100644
index e10e8979..00000000
--- a/.github/actions/install-lix/action.yml
+++ /dev/null
@@ -1,16 +0,0 @@
-name: Install Lix
-description: "Install Lix for the specified system"
-
-runs:
-  using: composite
-
-  steps:
-    - uses: DeterminateSystems/nix-installer-action@v20
-      with:
-        source-url: 'https://install.lix.systems/lix/lix-installer-${{ fromJSON(''{"X64":"x86_64","X86":"i686","ARM64":"aarch64","ARM":"armv7l"}'')[runner.arch] }}-${{ fromJSON(''{"Linux":"linux","macOS":"darwin","Windows":"windows"}'')[runner.os] }}'
-        logger: pretty
-        diagnostic-endpoint: ""
-        extra-conf: |
-          experimental-features = flakes nix-command pipe-operator
-          substituters = https://nix-community.cachix.org https://catppuccin.cachix.org https://cache.nixos.org/ https://cache.tgirl.cloud/tgirlcloud/
-          trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= catppuccin.cachix.org-1:noG/4HkbhJb+lUAdKrph6LaozJvAeEEZj4N732IysmU= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tgirlcloud:EaOlHrpuOI6Zwmir3/MzqS9uA0Xn3gYr15/k/v0HIPo=
diff --git a/.github/workflows/build-isos.yml b/.github/workflows/build-isos.yml
index 3a57dcf4..1a7bbcc5 100644
--- a/.github/workflows/build-isos.yml
+++ b/.github/workflows/build-isos.yml
@@ -30,7 +30,11 @@ jobs:
           persist-credentials: false
 
       - name: Install Lix
-        uses: ./.github/actions/install-lix
+        uses: samueldr/lix-gha-installer-action@v2025-10-27
+        with:
+          extra_nix_config: |
+            substituters = https://nix-community.cachix.org https://catppuccin.cachix.org https://cache.nixos.org/ https://cache.tgirl.cloud/tgirlcloud/
+            trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= catppuccin.cachix.org-1:noG/4HkbhJb+lUAdKrph6LaozJvAeEEZj4N732IysmU= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tgirlcloud:EaOlHrpuOI6Zwmir3/MzqS9uA0Xn3gYr15/k/v0HIPo=
 
       # we shouldn't really be needing to do this, but sometimes lix isn't
       # build before we get here
diff --git a/.github/workflows/check-lock.yml b/.github/workflows/check-lock.yml
index 17585956..6ab6bd8c 100644
--- a/.github/workflows/check-lock.yml
+++ b/.github/workflows/check-lock.yml
@@ -26,7 +26,11 @@ jobs:
           persist-credentials: false
 
       - name: Install Lix
-        uses: ./.github/actions/install-lix
+        uses: samueldr/lix-gha-installer-action@v2025-10-27
+        with:
+          extra_nix_config: |
+            substituters = https://nix-community.cachix.org https://catppuccin.cachix.org https://cache.nixos.org/ https://cache.tgirl.cloud/tgirlcloud/
+            trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= catppuccin.cachix.org-1:noG/4HkbhJb+lUAdKrph6LaozJvAeEEZj4N732IysmU= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tgirlcloud:EaOlHrpuOI6Zwmir3/MzqS9uA0Xn3gYr15/k/v0HIPo=
 
       - name: Check flake.lock
         run: nix run github:tgirlcloud/pkgs#locker
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index d4395080..19af9c66 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -37,7 +37,11 @@ jobs:
           persist-credentials: false
 
       - name: Install Lix
-        uses: ./.github/actions/install-lix
+        uses: samueldr/lix-gha-installer-action@v2025-10-27
+        with:
+          extra_nix_config: |
+            substituters = https://nix-community.cachix.org https://catppuccin.cachix.org https://cache.nixos.org/ https://cache.tgirl.cloud/tgirlcloud/
+            trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= catppuccin.cachix.org-1:noG/4HkbhJb+lUAdKrph6LaozJvAeEEZj4N732IysmU= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tgirlcloud:EaOlHrpuOI6Zwmir3/MzqS9uA0Xn3gYr15/k/v0HIPo=
 
       - name: Check Flake
         run: nix flake check --option allow-import-from-derivation false
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 5a58dfeb..01ee0887 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -24,7 +24,11 @@ jobs:
           persist-credentials: false
 
       - name: Install Lix
-        uses: ./.github/actions/install-lix
+        uses: samueldr/lix-gha-installer-action@v2025-10-27
+        with:
+          extra_nix_config: |
+            substituters = https://nix-community.cachix.org https://catppuccin.cachix.org https://cache.nixos.org/ https://cache.tgirl.cloud/tgirlcloud/
+            trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= catppuccin.cachix.org-1:noG/4HkbhJb+lUAdKrph6LaozJvAeEEZj4N732IysmU= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tgirlcloud:EaOlHrpuOI6Zwmir3/MzqS9uA0Xn3gYr15/k/v0HIPo=
 
       - name: Build Linux packages
         run: nix build -L .#docs
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 5721f1ed..313ac6f7 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -26,7 +26,11 @@ jobs:
           persist-credentials: false
 
       - name: Install Lix
-        uses: ./.github/actions/install-lix
+        uses: samueldr/lix-gha-installer-action@v2025-10-27
+        with:
+          extra_nix_config: |
+            substituters = https://nix-community.cachix.org https://catppuccin.cachix.org https://cache.nixos.org/ https://cache.tgirl.cloud/tgirlcloud/
+            trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= catppuccin.cachix.org-1:noG/4HkbhJb+lUAdKrph6LaozJvAeEEZj4N732IysmU= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tgirlcloud:EaOlHrpuOI6Zwmir3/MzqS9uA0Xn3gYr15/k/v0HIPo=
 
       - name: Update Lockfile
         id: pr