diff --git a/.forgejo/workflows/ci.yaml b/.forgejo/workflows/ci.yaml
index ef40377..d36c6e0 100644
--- a/.forgejo/workflows/ci.yaml
+++ b/.forgejo/workflows/ci.yaml
@@ -21,4 +21,4 @@ jobs:
         with:
           name: kitchen
           authToken: '${{ secrets.CACHIX_TOKEN }}'
-      - run: nix flake check
+      - run: nix flake check --accept-flake-config
diff --git a/hosts/ami/upgrade.nix b/hosts/ami/upgrade.nix
index d87212e..1482adb 100644
--- a/hosts/ami/upgrade.nix
+++ b/hosts/ami/upgrade.nix
@@ -2,7 +2,7 @@ _: {
   system.autoUpgrade = {
     enable = true;
     flake = "https://buffets.kitchen/kitchen/rice/archive/main.tar.gz#ami";
-    flags = ["--option" "tarball-ttl" "0"];
+    flags = ["--option" "tarball-ttl" "0" "--accept-flake-config"];
     dates = "minutely";
 
     allowReboot = true;