diff --git a/files/etc/tor/torrc b/files/etc/tor/torrc
index 1331db5..de459bd 100644
--- a/files/etc/tor/torrc
+++ b/files/etc/tor/torrc
@@ -2,7 +2,7 @@
 # https://gitlab.torproject.org/tpo/core/tor/-/blob/main/src/config/torrc.sample.in
 #
 # NOTE: this file is auto-updated by nakamochi sysupdates
-# https://github.com/nakamochi/sysupdates
+# https://git.qcode.ch/nakamochi/sysupdates
 
 User tor
 Log notice syslog
diff --git a/ndg/env b/ndg/env
index 2a56b82..0becbcc 100644
--- a/ndg/env
+++ b/ndg/env
@@ -1,5 +1,5 @@
 NDG_VERSION=v0.8.1
-NDG_URL_AARCH64=https://github.com/nakamochi/ndg/releases/download/v0.8.1/ndg-v0.8.1-aarch64.tar.gz
+NDG_URL_AARCH64=https://git.qcode.ch/attachments/8c9a6d54-0691-4835-8158-c6c06fb9846a
 NDG_SHA256_AARCH64=d67fd26149dd13900125a6ebfc527028110f8f71dfb2ae311f7a9ca0f99ceff0
 
 NDG_HOME=/home/uiuser
diff --git a/update.sh b/update.sh
index 1391e67..bab0529 100755
--- a/update.sh
+++ b/update.sh
@@ -1,5 +1,5 @@
 #!/bin/sh
-# https://github.com/nakamochi/sysupdates
+# https://git.qcode.ch/nakamochi/sysupdates
 # pull changes from a remote git repo and run the "apply" script.
 # commits are expected to be signed by gpg keys with a sufficient
 # trust level to satisfy git pull --verify-signatures.
@@ -8,6 +8,7 @@
 # in the future, the plan is to provide an on-screen git diff and apply updates
 # after user confirmation.
 
+REPO="${REPO:-https://git.qcode.ch/nakamochi/sysupdates.git}"
 # git branch to pull from. defaults to master.
 # another value is "dev", for a development aka unstable version.
 BRANCH="${1:-master}"
@@ -33,7 +34,7 @@ date > $LOGFILE
 # fetch updates from remote
 cd "$REPODIR"
 {
-git remote set-url origin https://github.com/nakamochi/sysupdates.git
+git remote set-url origin "$REPO"
 git fetch origin             # in case the refspec is unknown locally yet
 git reset --hard HEAD        # remove local changes
 git clean -fd                # force-delete untracked files