diff --git a/README.md b/README.md
index 9f17bc7..eb1f0a1 100644
--- a/README.md
+++ b/README.md
@@ -23,7 +23,7 @@ the run sequence on the node is approximately as follows:
 
 at the moment, an on-screen diff and confirmation aren't implemented yet.
 `nd` and `ngui` is where it'll happen,
-in the [ndg](https://git.qcode.ch/nakamochi/ndg) repo.
+in the [ndg](https://github.com/nakamochi/ndg) repo.
 
 when configuring a new node, clone this repo and set up a cron job to execute
 the `update.sh` script once a day. The script requires `REPODIR` and `LOGFILE`
diff --git a/files/etc/tor/torrc b/files/etc/tor/torrc
index de459bd..1331db5 100644
--- a/files/etc/tor/torrc
+++ b/files/etc/tor/torrc
@@ -2,7 +2,7 @@
 # https://gitlab.torproject.org/tpo/core/tor/-/blob/main/src/config/torrc.sample.in
 #
 # NOTE: this file is auto-updated by nakamochi sysupdates
-# https://git.qcode.ch/nakamochi/sysupdates
+# https://github.com/nakamochi/sysupdates
 
 User tor
 Log notice syslog
diff --git a/ndg/env b/ndg/env
index 92bdfdc..2a56b82 100644
--- a/ndg/env
+++ b/ndg/env
@@ -1,5 +1,5 @@
 NDG_VERSION=v0.8.1
-NDG_URL_AARCH64=https://git.qcode.ch/attachments/8c9a6d54-0691-4835-8158-c6c06fb9846a
+NDG_URL_AARCH64=https://github.com/nakamochi/ndg/releases/download/v0.8.1/ndg-v0.8.1-aarch64.tar.gz
 NDG_SHA256_AARCH64=d67fd26149dd13900125a6ebfc527028110f8f71dfb2ae311f7a9ca0f99ceff0
 
 NDG_HOME=/home/uiuser
@@ -33,7 +33,7 @@ ndg_svc_install() {
 
     cat <<EOF > $svdir/finish.new
 #!/bin/sh
-# workaround https://git.qcode.ch/nakamochi/ndg/issues/17
+# workaround https://github.com/nakamochi/ndg/issues/12
 pkill -9 ngui
 EOF
     chmod +x $svdir/finish.new
diff --git a/update.sh b/update.sh
index 8a57c06..1391e67 100755
--- a/update.sh
+++ b/update.sh
@@ -1,5 +1,5 @@
 #!/bin/sh
-# https://git.qcode.ch/nakamochi/sysupdates
+# https://github.com/nakamochi/sysupdates
 # pull changes from a remote git repo and run the "apply" script.
 # commits are expected to be signed by gpg keys with a sufficient
 # trust level to satisfy git pull --verify-signatures.
@@ -33,6 +33,7 @@ date > $LOGFILE
 # fetch updates from remote
 cd "$REPODIR"
 {
+git remote set-url origin https://github.com/nakamochi/sysupdates.git
 git fetch origin             # in case the refspec is unknown locally yet
 git reset --hard HEAD        # remove local changes
 git clean -fd                # force-delete untracked files